MEMCMP(3) | Library Functions Manual | MEMCMP(3)

# NAME

memcmp — compare byte string

# LIBRARY

Standard C Library (libc, -lc)

# SYNOPSIS

#include <string.h>

int
memcmp(const void *b1, const void *b2, size_t len);

# DESCRIPTION

The memcmp() function compares byte string b1 against byte string b2. Both strings are assumed to be len bytes long.

# RETURN VALUES

The memcmp() function returns zero if the two strings are identical, otherwise returns the difference between the first two differing bytes (treated as unsigned char values, so that ‘`\200`’ is greater than ‘`\0`’, for example). Zero-length strings are always identical.

Do not use memcmp() to compare cryptographic secrets, because the time it takes varies depending on how many bytes are the same, and thus leaks information about the two strings by a timing side channel. To compare secrets, hashes, message authentication codes, etc., use consttime_memequal(3) instead.

# SEE ALSO

bcmp(3), consttime_memequal(3), strcasecmp(3), strcmp(3), strcoll(3), strxfrm(3)

# STANDARDS

The memcmp() function conforms to ANSI X3.159-1989 (“ANSI C89”).

June 23, 2013 | NetBSD 7.2